
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
File: 544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft (raw, json)
Hash identifier: ClHHFAkDYuWNbi1efA7fs2NLmLDGbT5/beyIoqjPL8A=
Subject key identifier: 60:1C:3C:E2:A8:EF:66:9F:14:00:7A:ED:27:5E:5D:BF:9C:50:5B:3E
Authority key identifier: 54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8
Certificate issuer: /CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8
Certificate serial: 6A2487D5806EB1BB62ACC7B867CC6671CEF3D429
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
Manifest number: FC
Signing time: Wed 26 Aug 2026 05:38:10 +0000
Manifest this update: Wed 26 Aug 2026 05:33:10 +0000
Manifest next update: Thu 27 Aug 2026 07:01:10 +0000
Files and hashes: 1: 326130363a313238353a646561643a3a2f34382d3438203d3e20323036393831.roa (hash: /MFLzAsvOCJeLOEWlbPKnenIdyo3QrpeZg15YJwkcZI=)
2: 326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa (hash: gEq1PyQ0/WyvK1nTs6bKynEeXPOPYcgFZMOk1v3GFlk=)
3: 544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl (hash: 3d91paE1t3OSbKcrD3QA6GmQNbK5kvQ3PJe2FjhiT70=)
4: 326130363a313238353a3a2f33322d3332203d3e20323036393831.roa (hash: egrN8k6Xk0Kwig5ye5zQFDYGrtcNNmET1Xfnp7uE4Hk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl
rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:24:87:d5:80:6e:b1:bb:62:ac:c7:b8:67:cc:66:71:ce:f3:d4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8
Validity
Not Before: Aug 26 05:33:10 2026 GMT
Not After : Aug 27 07:01:10 2026 GMT
Subject: CN=601C3CE2A8EF669F14007AED275E5DBF9C505B3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:a8:92:7d:87:34:54:06:90:c4:ac:45:46:
33:4d:74:a0:b3:1e:df:a5:69:c2:f9:6d:39:1d:e4:
d8:a5:4d:d2:b7:b7:bd:29:32:87:79:d7:58:a4:66:
c0:cf:3f:46:60:8c:9c:1f:20:24:99:f0:39:48:99:
fb:8e:d6:f7:64:a1:c8:b0:73:ff:af:28:25:52:6b:
71:1e:45:65:08:5d:1b:d3:0f:4d:db:02:b9:ed:14:
29:8b:27:2e:ea:2f:32:41:4b:08:b1:1f:c3:d0:1f:
74:44:35:37:58:44:8e:b2:fb:07:37:3c:aa:15:e0:
d2:ed:e6:db:23:f1:61:a4:d2:0e:24:7c:4a:1c:b3:
fa:73:85:40:cc:db:5a:d3:da:00:0a:b5:fe:0d:b4:
30:fa:56:69:e8:fe:f2:38:1f:4a:1f:c6:e9:03:df:
9c:68:79:21:9c:91:00:4f:38:43:8f:6f:4a:a5:ce:
3a:3c:12:df:a4:d7:28:de:4d:7f:c6:ea:72:b4:06:
1b:32:13:dc:09:bf:6c:9a:ad:83:0c:18:13:49:b4:
9e:99:4d:48:f2:85:0e:9d:24:5b:d2:58:46:3d:b3:
1a:7e:b9:cb:b8:67:51:70:68:ce:68:df:99:f6:6e:
0d:d0:5b:81:80:e4:a3:94:bd:e8:3a:57:17:02:6d:
6b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1C:3C:E2:A8:EF:66:9F:14:00:7A:ED:27:5E:5D:BF:9C:50:5B:3E
X509v3 Authority Key Identifier:
keyid:54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c0:8a:74:c4:a3:1a:b5:63:cb:98:a4:75:46:c6:54:fc:06:
2c:69:fa:4a:3a:0a:9a:48:0c:b2:20:8c:0e:8f:c7:e7:2f:44:
14:93:c7:be:af:bc:84:b1:ac:b7:e0:35:25:55:c4:df:59:83:
f5:d9:2a:40:06:1a:c8:89:d4:9d:5b:87:3b:fe:61:68:8e:23:
98:de:a2:21:ef:24:26:fa:73:3a:48:9a:c4:e6:29:39:73:57:
36:a9:b2:52:07:d3:78:38:ac:5b:b0:b0:44:53:a1:c0:11:10:
5f:a4:25:6c:d7:c1:fa:3e:c0:38:67:23:c7:e2:99:29:67:74:
84:44:e3:89:94:3b:3a:93:db:4d:a6:18:fb:7b:1e:94:ff:5e:
2f:b1:14:33:c1:ce:6c:78:41:45:7a:6d:e2:54:36:57:a0:33:
6a:d4:41:18:cd:4d:af:9a:1f:ae:83:3e:53:40:9e:88:72:f5:
7c:5e:17:64:53:ce:37:71:87:bd:a8:52:f6:73:2a:a9:4c:57:
b2:e5:88:98:aa:f2:5d:a2:3f:e1:4e:d5:d5:bf:88:9a:40:bc:
57:19:48:ee:c2:24:88:ed:d5:f8:6b:93:50:d4:0b:61:27:ae:
c7:d4:73:f6:9b:ea:0f:56:2e:39:6d:99:88:72:90:3f:21:df:
ba:6e:da:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:39:41 2026 by rpki-client